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CURRENTLY PENDING CLAIMS 

1. (Original) A method for message authentication^ comprising: 

generating a key pair associated with a domain, wherein a public component of the 
key pair is accessible to a domain name server (DNS) that is associated with the domain; 

if a message originates from a sender^s address associated with the domain, 
employing a private component of the key pair to digitally sign the message and forwarding the 
digitally signed message towards a recipient of the message; and 

if the public component stored with the DNS verifies that the digitally signed 
message originated from the domain associated with the sender's address, providing the verified 
digitally signed message to the recipient. 

2. (Previously Presented) The method of Claim I, further comprising a text record that 
is accessible to the DNS and which includes at least the public component of the key pair. 

3. (OriginaI> The method of Claim 1 , frirther comprising generating a selector that is 
associated with the key pair, wherein the selector is employable to identify the key pair's public 
component for accessing by die DNS. 

4. (Original) The method of Claim 3, fbrther comprising forming a lookup query for 
the DNS by combining the selector with the sender's address. 

5. (Original) The method of Claim 1, further comprising employing a mail server 
associated with the domain to forward the digitally signed message towards the recipient of the 
message. 
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6. (Original) The method of Claim 1, further comprising employing a mail server 
associated with the domain to employ the private component of the key pair to digitally sign the 
message. 

7. (Original) The method of Claim 1 , further compiismg employing a mail server that 
is associated vdth a domain of the recipient to verify the domain of origination for the message with 
the public component of the key pair. 

8. (Original) The method of Claim 1, further comprising employing a mail server that 
is associated with a domain of the recipient to provide the verified digitally signed message to the 
recipient 

9. (Original) The method of Claim 1» further comprising accessing the public 
component of the key pair by employing a text record in a look up table for the DNS. 

10. (Original) The method of Claim 1 , further comprising generating a plurality of key 
pairs associated with the domain, wherem at least two key pairs are associated with at least two 
different senders and wherein each public component of each key pair is accessible by the DNS 
associated with the domain. 

1 1 . (Original) The mefliod of Claim 10, further comprising separately associating 
private components of the at least two key pairs wi^ at least two mail servers, wherein the at least 
two mail servers are associated with the domain. 

12. (Original) The method of Claim 10, wherein each private component of each key 
pair employs a mail server associated with the domain to fbrwazd the digitaUy signed message 
towards the recipient of the message. 
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13. (Original) The method of Claim 1, further comprising employing one of a plurality 
of mail servers associated with the domain to digitally sign the message with the private component 
of the key pair and forward the digitally signed message towards the recipient. 

14. (Original) A system for message authentication, comprising: 

a client that is enabled to generate at least one message for a recipient, v^erein the client 
is associated with a domain; 

a mail server associated with the domain of the client, wherein the mail server performs 
actions, including: 

enabling the generation of a key pair associated with the domain, wherein a public 
component of the key pair is accessible to a DNS that is associated with the domain; and 

if a message from the client originates from the domain, enabling a private component of 
the key pair to digitally sign the message and forward the digitally signed message towards the 
recipient of the message; and 

a mail server associated with a domain of the recipient, wherein the mail server performs 
actions including enabling the public component stored with the DNS to verify that the digitally 
signed message originated from the domain associated with the client, and enabling each verified 
digitally signed message to be provided to the recipient. 

1 5. (Original) The system of Claim 1 4, wherein the message is at least one of an email, 
instant message (IM), short message sendee (SMS)* 

16. (Original) Hie system of Claim 14, further comprises a text record ^t is accessible 
to the DNS and which includes at least the public component of the key pair. 



(S:\0822tfVl00S142-USl\8002S206.rx>C miBMUlnmmiimw } 



PAGE 7f13'R(»fl)AT6mi20057:21:55PM [Eastern DaySgtt 



06/24/2005 15:24 FAX 2062828901 



OAReVFAX 



@008/013 



Application No.: 10/671,319 5 Docket No.: 08226/100S142-US1 

17. (Original) The system of Claim 14> further comprises a selector that is associated 
with the key pair, wherein the selector is employable to identify the key pair's public component for 
accessing by the DNS. 

18. (Original) The system of Claim 1 4, further comprising a plurality of key pairs that 
are associated with at least two different clients, wherein each public component of each key pair is 
accessible by the DNS associated with flie domain. 

1 9. (Original) A canier wave signal that enables actions for message authentication, 
comprising: 

generating a key pair associated with a domain, wherein a public component of the 
key pair is accessible to a domain name server CDNS) that is associated with Ae domain; 

if a message originates from a sender's address associated with the domain, 
employing a private component of the key pair to digitally sign the message and forwarding the 
digitally signed message towards a recipient of the message; and 

if the public component stored with the DNS verifies that the digitally signed 
message originated from the domain associated with the sender*s address, providing the verified 
digitally signed message to the recipient. 

20. (Original) The carrier wave signal of Claim 19, fiirthcr comprising generating a 
selector that is associated with the key pair, wherein the selector is employable to identify the key 
pair's public component for accessing by the DNS. 

21. (Original) The carrier wave signal of Claim 19, further comprising generating a 
plurality of key pairs associated with the domain, wherein at least two key pairs are associated with 
at least two different senders and wherein each public component of each key pair is accessible by 
the DNS associated with the domain. 

{S!\08226\100S142*USI\800282a6.DOC UllllilDanillHnitl ) 



PAGE8/13'RCVDAT6l24/20l)57:21:55m[Eastim 



P6/24/2005 15:24 FAX 2062828901 



OARBYFAX 



a008/013 



AppUcation No.: 10/671,319 6 Docket No.: 08226/1 00S142-US1 

22. (Original) The carrier wave signal of Claim 21> furfher comprising separately 
associating private components of the at least two key pairs with at least two mail servers, wherein 
the at least two mail servers are associated witii the domain. 

23. (Original) The carrier wave signal of Claim 21 » wherein each private component of 
each key pair employs a mail server associated with the domain to forward the digitally signed 
message towards the recipient of die message. 



24. (Original) A client that enables message authentication, comprising: 

enabling the generation of a key pair associated with a domain, wherein a public 
component of the key pair is accessible to a domain name server (DNS) that is associated with the 
domun; 

if a message originates fix)m a sender's address associated with the domain, enabling 
a private component of the key pair to be employed to digitally sign the message and forwarding the 
digitally signed message towards a recipient of the message; and 

if the public component stored with the DNS verifies that the digitally signed 
message originated from the domain associated with the sender's address, providing the verified 
digitally signed message to the lecipient. 



25. (Original) The client of Claim 24, further comprising enabling the generation of a 
plurality of key pairs associated with the domain, vAerein at least two key pairs are associated with 
at least two different senders and wherein each public component of each key pair is accessible by 
the DNS associated with the domain. 

26. (Original) The client of Claim 25, fiirther comprising enabling the separate 
association of private components of the at least two key pairs with at least two mail servm, 
wherein the at least two mail servers are associated with the domain. 
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27. (Original) The client of Claim 25, further comprising enabling each private 
component of each key pair to employ a mail server associated with the domain to forward the 
digitally signed message towards the recipient of the message. 

28. (Original) A server that enables message authentication^ comprising: 
enabling the generation of a key pair associated with a domain, wherein a public 

component of the key pair is accessible to a domain name server (DNS) that is associated with the 
domain; 

if a message originates from a sender *s address associated with the domain, enabling 
a private component of the key pair to be employed to digitally sign the message and forwarding the 
digitally signed message towards a recipient of the message; and 

if the public component stored vnih the DNS verifies that the digitally signed 
message originated from the domain associated widi the sender's address, providing die verified 
digitally signed message to ttie recipient. 

29. (Original) A method for enabling message authentication, comprising; 

means for enabling the generation of a key pair associated with a domain, wherein a 
public component of the key pair is accessible to a domain name server (DNS) that is associated 
with the domain; 

if a message originates from a sender's address associated vvitfa the doniain, means 
for enabling a private component of the key pair to be employed to digitally sign the message and 
forwarding the digitally signed message towards a recipient of the message; and 

if the public component stored with the DNS verifies that the digitally signed 
message originated from the domain associated with the sender's address, means for providing the 
verified digitally signed message to the recipient 
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